-
Notifications
You must be signed in to change notification settings - Fork 14
Payment Status Issues
curl --request POST --data "NCERROR=0&PAYID=123456&ORDERID=123456&STATUS=test" --dump-header - --silent --output /dev/null --user-agent "Mozilla/3.0 (compatible; Indy Library)" "http://example.com/"
Turns out, after a little investigation, the Indy Library user-agent actually belongs to a Delphi/C++ Builder suite of tools for doing internet stuff - therefore, someone has written the spambot that I've noticed here in Delphi or C++ Builder and used this library. If you see little individual hits from something describing itself as Indy Library it could be some innocent application. Developers who use the Indy Library for legitimate reasons should really change the User Agent that their software sends when making HTTP requests, to avoid being tarred with the same brush.
Source: http://www.flarp.net/misc/indylib.php
curl --request POST --data "Data=test&Seal=test&InterfaceVersion=HP_1.0" --dump-header - --silent --output /dev/null --user-agent "Java/1.8.0_25" "http://example.com/"